[mapserver-commits] [MapServer/MapServer] 3c3c9b: Use CPLSetConfigOption/CPLGetConfigOption for some...

Steve Lime noreply at github.com
Fri Apr 30 13:15:45 PDT 2021


  Branch: refs/heads/branch-7-0
  Home:   https://github.com/MapServer/MapServer
  Commit: 3c3c9b3934f42808c15957f9378dec904203228d
      https://github.com/MapServer/MapServer/commit/3c3c9b3934f42808c15957f9378dec904203228d
  Author: Seth G <sethg at geographika.co.uk>
  Date:   2021-04-30 (Fri, 30 Apr 2021)

  Changed paths:
    M maphttp.c
    M mapserv.c
    M mapserv.h
    M mapservutil.c

  Log Message:
  -----------
  Use CPLSetConfigOption/CPLGetConfigOption for some CGI/FastCGI-related env vars (#6305)

Push a few high-value env vars into CPL config and then reference that instead of the env (mostly for IIS/FastCGI).


  Commit: 82a3eb5f6c8f75cedd095b909cc4990f3d8a99e1
      https://github.com/MapServer/MapServer/commit/82a3eb5f6c8f75cedd095b909cc4990f3d8a99e1
  Author: Steve Lime <steve.lime at state.mn.us>
  Date:   2021-04-30 (Fri, 30 Apr 2021)

  Changed paths:
    M mapfile.c
    M mapserv.c
    M mapserver.h
    M mapservutil.c

  Log Message:
  -----------
  Address flaw in CGI mapfile loading that makes it possible to bypass security controls (#6313) (#6314)

* Create coverity-scan.yml

* Update coverity-scan.yml

* Avoid resource leak... (CID 1503409)

* Revert "Avoid resource leak... (CID 1503409)"

This reverts commit 7d261af86140a491df170ba7054aa9d1aa9f3ad7.

* Updated...

* Limit action to MapServer/MapServer repo, run every Sunday (for now).

* Always force map parameter values through validation checks. Add validation checks on environment variable names.

* msIsValidRegex(): fix memleak

Co-authored-by: Even Rouault <even.rouault at spatialys.com>


Compare: https://github.com/MapServer/MapServer/compare/7e36981948cb...82a3eb5f6c8f


More information about the mapserver-commits mailing list